Gravity vulnerabilities

2 known vulnerabilities in Gravity from Marcobambini. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  A security vulnerability has been detected in marcobambini Gravity up to 0.9.7.

  CVE-2026-90715Sep 14, 2026Marcobambini

  A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity_json.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack may be performed fro

• 9.8 Critical severity

  gravity: Heap-based Buffer Overflow

  CVE-2026-40504Apr 16, 2026Marcobambini

  Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by crafting scripts with many string literals at global scope. Attackers can exploit insufficient bo